Struct TrendsManager 

pub struct TrendsManager { /* private fields */ }

High-level trends manager.

Implementations

impl TrendsManager

pub fn new(config: TrendsConfig) -> Self

Create a new trends manager.

pub fn with_dependencies( config: TrendsConfig, dependencies: TrendsManagerDependencies, ) -> Self

Create with dependencies.

pub fn start_background_detection(&self) -> JoinHandle<()>

Start background anomaly detection.

pub fn record_request( &self, entity_id: &str, session_id: Option<&str>, user_agent: Option<&str>, authorization: Option<&str>, client_ip: Option<&str>, ja4: Option<&str>, ja4h: Option<&str>, last_request_time: Option<i64>, ) -> Vec<Signal>

Extract and record signals from request context.

pub fn record_signal(&self, signal: Signal)

Record a single signal.

pub fn record_payload_anomaly( &self, id: String, anomaly_type: AnomalyType, severity: AnomalySeverity, detected_at: i64, template: String, entity_id: String, description: String, metadata: AnomalyMetadata, )

Record a payload anomaly.

pub fn record_login( &self, user_id: &str, timestamp_ms: u64, ip: &str, latitude: f64, longitude: f64, country: &str, country_code: &str, city: Option<&str>, accuracy_km: u32, device_fingerprint: Option<&str>, ) -> bool

Record a login event for impossible travel detection.

Checks if the user’s login pattern indicates geographically impossible travel (e.g., logging in from NYC then London within 10 minutes).

Arguments

• user_id - User identifier (session subject, user ID, or email)
• timestamp_ms - Unix timestamp in milliseconds
• ip - IP address of the login
• latitude - Latitude from GeoIP lookup
• longitude - Longitude from GeoIP lookup
• country - Country name
• country_code - ISO country code
• city - Optional city name
• accuracy_km - GeoIP accuracy radius in km
• device_fingerprint - Optional device fingerprint for correlation

Returns

true if an impossible travel alert was generated.

pub fn whitelist_travel_route( &self, user_id: &str, country1: &str, country2: &str, )

Add a whitelisted travel route for a user.

Known travel patterns (e.g., home <-> work across countries) can be whitelisted to prevent false positives.

pub fn remove_travel_whitelist( &self, user_id: &str, country1: &str, country2: &str, )

Remove a whitelisted travel route.

pub fn travel_stats(&self) -> TravelStats

Get impossible travel detection statistics.

pub fn clear_travel_history(&self, user_id: &str)

Clear impossible travel history for a user.

pub fn get_summary(&self, options: TrendQueryOptions) -> TrendsSummary

Get overall trends summary.

pub fn get_trends(&self, options: TrendQueryOptions) -> Vec<SignalTrend>

Get detailed trends by type.

pub fn get_signals_for_entity( &self, entity_id: &str, options: TrendQueryOptions, ) -> Vec<Signal>

Get signals for an entity.

pub fn get_signals(&self, options: TrendQueryOptions) -> Vec<Signal>

Get all signals matching criteria.

pub fn get_anomalies(&self, options: AnomalyQueryOptions) -> Vec<Anomaly>

Get anomalies matching criteria.

pub fn get_anomaly(&self, id: &str) -> Option<Anomaly>

Get a specific anomaly by ID.

pub fn active_anomaly_count(&self) -> usize

Get count of active anomalies.

pub fn get_correlations( &self, options: CorrelationQueryOptions, ) -> Vec<Correlation>

Get correlations matching criteria.

pub fn get_entity_correlations( &self, entity_id: &str, options: CorrelationQueryOptions, ) -> Vec<Correlation>

Get correlations for a specific entity.

pub fn stats(&self) -> TrendsManagerStats

Get manager statistics.

pub fn stats_snapshot(&self) -> TrendsStats

Get a stats snapshot for API responses.

pub fn clear(&self)

Clear all data.

pub fn cleanup(&self)

Cleanup old data.

pub fn destroy(&self)

Shutdown the manager.

pub fn is_enabled(&self) -> bool

Check if enabled.